CVE-2026-103647 | Progressive Robot hMailServer up to 6.3.5 Webmail cross site scripting

October 8, 2026 Yanac

A vulnerability described as problematic has been identified in Progressive Robot hMailServer up to 6.3.5. The affected element is an unknown function of the component Webmail. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-103647. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More